31508 matches found
CVE-2021-47920 WebMO Job Manager 20.0 Cross-Site Scripting via Search Parameters
WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external...
CVE-2021-47920
CVE-2021-47920 affects WebMO Job Manager 20.0. The vulnerability is a cross-site scripting flaw in search parameters, exploitable through the filterSearch and filterSearchType fields, enabling remote attackers to inject script code. Described impacts include non-persistent attacks such as session...
PT-2026-5565
WebMO Job Manager 20.0 contains a cross-site scripting vulnerability in search parameters that allows remote attackers to inject malicious script code. Attackers can exploit the filterSearch and filterSearchType parameters to perform non-persistent attacks including session hijacking and external...
WebMO Job Manager 跨站脚本漏洞
WebMO Job Manager is a core control panel for chemical computing software developed by WebMO Corporation. Version 20.0 of WebMO Job Manager contains a cross-site scripting vulnerability. This vulnerability stems from the search parameter, which has a cross-site scripting vulnerability, potentiall...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ec2, nri-rabbitmq, kubeflow-pipelines, minio, kserve-modelmesh-serving, xeol, grafana-rollout-operator, crossplane-provider-aws-s3, litefs, external-dns, cri-tools, kor, crossplane-provider-sql, gobuster, clickhouse-operator, guac, spire-serve...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ec2, kubeflow-pipelines, minio, kserve-modelmesh-serving, docker-machine-driver-linode, xeol, container-object-storage-interface, flux-image-automation-controller, terraform-provider-time, croc, x509-certificate-exporter, hydra, nats-top,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ec2, nri-rabbitmq, kubeflow-pipelines, minio, kserve-modelmesh-serving, xeol, grafana-rollout-operator, crossplane-provider-aws-s3, litefs, external-dns, cri-tools, kor, crossplane-provider-sql, gobuster, clickhouse-operator, guac, spire-serve...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-ec2, nri-rabbitmq, kubeflow-pipelines, minio, kserve-modelmesh-serving, xeol, grafana-rollout-operator, crossplane-provider-aws-s3, litefs, external-dns, cri-tools, kor, crossplane-provider-sql, gobuster, clickhouse-operator, guac, spire-serve...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: kapp, gitlab-runner-fips, git-lfs, kubernetes-replicator, crossplane-provider-aws-iam-fips, headlamp-fips, chisel, gitness, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, redis-operator, vault-fips, conftest,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: kapp, gitlab-runner-fips, git-lfs, kubernetes-replicator, crossplane-provider-aws-iam-fips, headlamp-fips, chisel, gitness, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, redis-operator, vault-fips, conftest,...
CVE-2025-61731 vulnerabilities
Vulnerabilities for packages: kapp, gitlab-runner-fips, git-lfs, kubernetes-replicator, crossplane-provider-aws-iam-fips, mkcert, headlamp-fips, chisel, gitness, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, redis-operator, vault-fips, conftest,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: kapp, gitlab-runner-fips, git-lfs, kubernetes-replicator, crossplane-provider-aws-iam-fips, mkcert, headlamp-fips, chisel, gitness, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, redis-operator, vault-fips, conftest,...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: kapp, gitlab-runner-fips, git-lfs, kubernetes-replicator, crossplane-provider-aws-iam-fips, headlamp-fips, chisel, gitness, spire-controller-manager, argo-rollouts-fips, policy-controller-fips, lvm-driver-fips, redis-operator, vault-fips, conftest,...
openSUSE 15 Security Update : assertj-core (SUSE-SU-2026:0344-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:0344-1 advisory. Upgrade to version 3.27.7: - CVE-2026-24400: Fix XXE vulnerability in isXmlEqualTo assertion bsc1257293. Tenable has extracted the preceding description bloc...
CVE-2017-16744
creationtimestamp| type| source ---|---|--- 2026-01-30 19:02:30+00:00| seen| https://gist.github.com/aw-junaid/e5393ee0715383c3f6ffefc141c7b487...
Security Bulletin: XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow - CVE-2025-13096
Summary IBM Business Automation Workflow is vulnerable to a XML eXternal Entity injection XXE attack. Vulnerability Details CVEID:CVE-2025-13096 DESCRIPTION: IBM Business Automation Workflow is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker...
CLEANSTART-2026-ER42900 ParseAddress function constructs domain-literal address components through repeated string concatenation
Multiple security vulnerabilities affect the external-dns-fips package. The ParseAddress function constructs domain-literal address components through repeated string concatenation. See references for individual vulnerability details...
CLEANSTART-2026-QJ89068 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Multiple security vulnerabilities affect the external-secrets-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...